Lucene search
HistoryFeb 27, 2024 - 5:15 p.m.
CVE-2023-48679
stored cross-site scripting
missing origin validation
acronis cyber protect 16
linux
windows
build 37391
CVSS3
3.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
3.6
Confidence
High
EPSS
0
Percentile
9.0%
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
Related
vulnrichment
vulnrichment
CVE-2023-48679
2024-02-27 16:45:53
cve
cve
CVE-2023-48679
2024-02-27 17:15:10
prion
prion
Cross site scripting
2024-02-27 17:15:00
cvelist
cvelist
CVE-2023-48679
2024-02-27 16:45:53
CVSS3
3.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
3.6
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2023-48679